Verified

ghsa:GHSA-5J98-2G5X-46V6: hickory-resolver < 0.26.2

hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures. Affected range: < 0.26.2. Fixed version: 0.26.2.

Affected technology

hickory-resolver · < 0.26.2
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 12-Oct-2026 10:15 UTC

Product: hickory-resolver
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-5j98-2g5x-46v6.html